Signal transfer point front end processor

A system comprising

• a Signaling System 7 (SS7) network,
• a plurality of SS7 Signal Transfer Points connected to the SS7 network and each having an assigned SS7 point code, and
• a plurality of Signal Transfer Point Front End Processors (STP-FEPs) each connected to the SS7 network and each also connected to a respective associated one of the Signal Transfer Points via a connection that is not part of the SS7 network;
• each STP-FEP having an assigned SS7 point code that is the same as the SS7 point code assigned to its associated Signal Transfer Point so that packets addressed to an individual one of the Signal Transfer Points are received by its associated STP-FEP;
• and each STP-FEP being arranged to forward received packets to the associated Signal Transfer Point except for ones of the received packets that meet at least one packet-denial rule which is not defined in any International Telecommunications Union SS7 Recommendation,
• wherein at least one of said STP-FEPs comprises one or more programmable processors and at least one tangible medium on which is stored software that, when executed by the one or more programmable processors, cause said at least one of said STP-FEPs to
• receive, from SS7 signaling points of an SS7 network, SS7 packets addressed to the Signal Transfer Point, each of said SS7 packets including an SS7 Message Transfer Part Level 2 header,
• implement at least a portion of SS7 Message Transfer Part Level 2, including obtaining, from the SS7 signaling points, retransmission of errored ones of said SS7 packets addressed to the SS7 Signal Transfer Point,
• store one or more packet-denial rules that were downloaded to said front-end processor,
• make a determination, for each non-errored received SS7 packet and for each of one or more packet-denial rules, whether said non-errored received SS7 packet meets any one or more of said rules, and
• provide said non-errored received SS7 packet to the Signal Transfer Point only if none of said rules are met, wherein said determination is made when at least one of the packet-denial rules is based, at least in part, on at least one portion of the SS7 Message Transfer Part Level 2 header of said non-errored received SS7 packet, said at least one portion including no portion of the SS7 protocol stack higher than the Signaling Control Part.